
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft
File: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft (raw, json)
Hash identifier: lD9CRpNJjq/Ktx5R+vvUKeZx9dlMamPUl6FT9/xK1lE=
Subject key identifier: 44:79:FE:4D:04:87:CF:E3:74:9A:AC:85:54:4D:4A:78:4A:8B:0C:E9
Authority key identifier: 62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD
Certificate issuer: /CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD
Certificate serial: 41A1E28AC23828903153414A8A00D5EB795B7B16
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft
Manifest number: C7
Signing time: Fri 10 Jul 2026 05:55:02 +0000
Manifest this update: Fri 10 Jul 2026 05:50:02 +0000
Manifest next update: Sat 11 Jul 2026 08:04:02 +0000
Files and hashes: 1: 326130613a363034343a376436303a3a2f34342d3434203d3e20323134353130.roa (hash: y/xuVv7X6zYCJrPA+bDxsoe/LQIZz7CWdfVo8c7UFKw=)
2: 326130613a363034343a376430303a3a2f34342d3434203d3e20323134353130.roa (hash: ae529QqeuntcTFvv9T15+WP4/UdZC9RUyhsU7rktznM=)
3: 326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa (hash: 2VvQmqh0rgVlWv8W6Pzf59GFxuPhxLO/UhXjGSwmG7I=)
4: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl (hash: DJFuTD+Doy/5u81TkSR9sdQfm1jlU1hGmeRcljKXL0o=)
5: 326130613a363034343a376432303a3a2f34382d3438203d3e20323134353130.roa (hash: c4XzPukkzKV+FHVuebz0bc6eIqhJ7TnmT9Q2167h39Y=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl
rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft
rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:a1:e2:8a:c2:38:28:90:31:53:41:4a:8a:00:d5:eb:79:5b:7b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD
Validity
Not Before: Jul 10 05:50:02 2026 GMT
Not After : Jul 11 08:04:02 2026 GMT
Subject: CN=4479FE4D0487CFE3749AAC85544D4A784A8B0CE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:eb:1c:1a:ed:9e:b9:bb:a1:47:79:60:0a:
6a:bd:6c:2a:84:43:33:85:b7:fd:32:72:d6:8a:ef:
2b:3e:72:c2:f4:3c:c1:11:98:55:e3:72:56:bb:a8:
f1:6a:1e:33:39:dd:a5:86:e9:de:5a:f8:b6:5d:39:
b2:84:56:36:91:68:3d:a0:e4:0c:db:57:af:f7:57:
a2:88:c2:85:77:82:df:4c:09:86:17:d7:0b:d8:8b:
7d:9c:6a:cc:32:b3:8d:b9:e8:c8:9f:e6:ca:3c:ce:
9e:85:dc:e1:8c:b2:bd:34:59:d2:80:64:d7:34:47:
c8:d3:68:51:e6:b6:be:32:2c:cb:64:22:77:5c:c2:
1f:23:67:79:53:7f:f6:37:34:ed:39:5e:21:e1:9a:
1e:38:ce:ac:3b:53:79:d0:b1:cb:2d:2f:50:01:e7:
2f:d8:da:56:5d:10:3f:1b:67:74:ed:d8:ad:f4:26:
17:25:f0:24:ba:0b:2f:f6:6d:d2:9d:d0:62:c7:3a:
2d:c7:b7:86:07:a7:87:6e:6d:21:08:ec:45:99:62:
66:cc:1e:bc:d2:d9:d4:f7:e4:56:b4:c1:e6:36:35:
9d:7e:6f:65:84:81:08:ad:da:36:f7:74:42:82:d7:
00:fc:c6:2e:80:db:07:4b:7e:81:97:3b:82:f7:bd:
a3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:79:FE:4D:04:87:CF:E3:74:9A:AC:85:54:4D:4A:78:4A:8B:0C:E9
X509v3 Authority Key Identifier:
keyid:62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:71:03:31:b8:e2:fc:cd:43:59:ac:ce:5b:0d:7b:35:81:90:
a1:4d:8b:99:d5:1d:b8:70:69:43:6f:82:45:fc:a0:1f:8c:10:
1e:ff:e9:78:b1:7a:2c:d8:51:fd:a6:26:98:01:75:5e:90:7e:
e5:a7:08:bf:2f:d3:b1:fc:cc:8c:e8:28:7f:8e:ff:b2:20:0e:
6a:ef:e0:74:95:be:d5:eb:81:a2:a7:04:0c:57:ee:35:55:43:
c7:8b:45:ed:b9:2f:79:04:45:a5:77:e6:30:0a:1c:a5:2c:60:
74:1b:52:e9:6d:92:8f:04:e7:6c:00:cb:f3:e8:c5:93:e6:d5:
f9:ac:46:48:51:45:37:fb:3f:ca:b4:77:f0:82:f1:fe:a4:2e:
20:d5:4b:e7:87:e5:22:ed:46:05:59:f5:88:c5:e6:a5:8a:6f:
15:64:1f:bc:25:43:3b:f1:42:a5:ce:00:0e:06:f7:db:ff:04:
f2:50:ef:1b:72:cd:2b:fb:62:53:66:82:4b:82:f8:25:43:03:
b6:6f:4a:c0:88:fe:20:a0:86:5d:4a:fb:79:00:63:de:56:ba:
1a:fe:65:f0:0b:95:8c:78:bf:ff:df:1e:b9:ca:0c:92:92:6a:
b7:ca:a1:7e:82:22:81:a7:76:af:b2:12:b0:db:7f:03:22:c2:
0a:f1:dd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 17:12:24 2026 by rpki-client